[Javascript] ADMIN: Klez virus/worm - someone(s) on the JavaScript has the virus, here are cleaning instructions

David Merchant merchant at LATECH.EDU
Thu Jun 26 13:13:20 CDT 2003


Someone(s) on the list has the Klez virus. It comes in a email message that 
says there is a movie file attached (which is actually the virus). It is a 
very common, and dangerous, worm. It is very hard to determine who since it 
is a clever worm that fakes/spoofs the from field, so when you get an 
infected email that says it is from Person A, it probably never came from 
Person A's machine, but Person B who just happens to have Person A's email 
address, as well as yours (or this list's) on their computer. You can not 
trust the From field, and that makes it hard to determine whose computer 
the virus/worm actually was mailed from. It can infect a person's computer 
and send out emails without that person knowing. So no use trying to blame 
anyone, there are many victims of this virus.

For a free removal tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.removal.tool.html

and from McAfee:
http://vil.mcafee.com/dispVirus.asp?virus_k=99455

Everyone, please check your pc for this virus. I'm suddenly getting a 
deluge of emails sent to the listowner address with the virus in it, and a 
few others on the list are reporting getting emails that are marked as 
coming from the list-owner with a movie attachment but it is actually the 
virus.

If you get an email that says it is from the javascript list or javascript 
list-owner and it has a "movie" attachment to it, delete it immediately. 
Update your virus protection, if you have it, and manually run it to check 
for the Klez virus on your PC, you'll be doing your friends, colleagues and 
customers a favor by doing so.

TTFN,
David

Director of Integrated Technology
CATALyST
Louisiana Tech University
Carson Taylor Hall, Rm. 130
Adams Street
(PO Box 3179)
Ruston, LA 71272
Tel: (318) 257-4772
Fax: (318) 257-3852
projectlife.latech.edu
c3.latech.edu
catalyst.latech.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolt.org/pipermail/javascript/attachments/20030626/e62992dc/attachment.htm>


More information about the Javascript mailing list